PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How HackerOne Helps the Vulnerability Management Process

hackerone.com | vulnerability | #vulnerability-management | #cve | #triage | #ethical-hacking | #hackerone | #intel
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne explains how ethical hackers complement scanners: finding unknown bugs, triaging false positives, and retesting fixes. Intel's 2020 report credits hackers with 45% of its published CVEs.
Published
Collected

Related coverage

research · bishopfox.com
Separating Signal from Slop: Triaging CVEs in the Age of AI Security Research
CVE disclosures are up 85% while exploitation barely moved. Bishop Fox breaks down four Nginx CVEs that looked critical but rarely affect real deployments.
blog · hackenproof.com
What Is Penetration Testing? How It Works, What You Get, and When to Test
A pentest is a time-boxed, authorized attack where ethical hackers chain flaws to prove exploitable risk, not just run scans. It outlines deliverables, audit drivers, and when to test.
blog · jfrog.com
The Year the Vulnerability Backlog Changed Shape
AI coding tools are swelling vulnerability backlogs at machine speed. Discover how CISOs can adapt supply chain security and governance for the agentic era.
vulnerability · hackerone.com
Advanced Workflows with Inbox Views
HackerOne adds customizable Inbox Views: security teams can create, reorder and remove saved filters to build advanced disclosure workflows, such as Tier 1/Tier 2 triage, per-platform queues or separate bounty stages.
vulnerability · hackerone.com
Edit a Report's Vulnerability Types
HackerOne adds the ability for security teams to edit a report's vulnerability types after submission, with every change recorded in the report timeline for more accurate vulnerability data.
vulnerability · bughunters.google.com
The Tale of Google’s Response to Reptar CPU Vulnerability
Google recounts its response to Reptar (CVE-2023-23583), a complex CPU vulnerability, showing how coordinated vulnerability response protected products, users, and millions of devices online.
Back